cbcvebase.
CVE-2020-36529
published 2022-06-07

CVE-2020-36529: A vulnerability classified as critical has been found in SevOne Network Management System up to 5.7.2.22. This affects the file traceroute.php of the…

PriorityP259high8.8CVSS 3.1
AVNACLPRLUINSUCHIHAH
EPSS
3.90%
89.0th percentile
A vulnerability classified as critical has been found in SevOne Network Management System up to 5.7.2.22. This affects the file traceroute.php of the Traceroute Handler. The manipulation leads to privilege escalation with a command injection. It is possible to initiate the attack remotely.

Affected

24 ranges
VendorProductVersion rangeFixed in
ibmsevone_network_performance_management5.7.2.0 – 5.7.2.22—
sevonenetwork_management_system——
sevonenetwork_management_system——
sevonenetwork_management_system——
sevonenetwork_management_system——
sevonenetwork_management_system——
sevonenetwork_management_system——
sevonenetwork_management_system——
sevonenetwork_management_system——
sevonenetwork_management_system——
sevonenetwork_management_system——
sevonenetwork_management_system——
sevonenetwork_management_system——
sevonenetwork_management_system——
sevonenetwork_management_system——
sevonenetwork_management_system——
sevonenetwork_management_system——
sevonenetwork_management_system——
sevonenetwork_management_system——
sevonenetwork_management_system——
sevonenetwork_management_system——
sevonenetwork_management_system——
sevonenetwork_management_system——
sevonenetwork_management_system——

CVSS provenance

nvdv3.18.8HIGHCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
nvdv2.08.5HIGHAV:N/AC:M/Au:S/C:C/I:C/A:C
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.